Privacy Policy

1. Who processes your data and under which law

JAMBOX ACADEMY S.A.S. (hereinafter, “JamBox”), a simplified stock corporation incorporated in Colombia, with domain jamboxacademy.com, is responsible for the processing of the personal data it collects through its platform, in accordance with Law 1581 of 2012 (the general personal data protection regime of Colombia) and Law 1098 of 2006 (Childhood and Adolescence Code), when the data subject is a minor.

For any question about your data you can write to us at contacto@jamboxacademy.com.

2. What data we collect

Account data: name, email address, and role (student, teacher, or administrator).

Service data: notes, files, links, and assignments that teachers and students share within the private space; history of scheduled sessions and attendance.

Billing data: email address and payment and subscription records (plan, amounts, and payment statuses). JamBox does not receive or store card numbers: payment data is tokenized by the Wompi gateway.

Technical data: security logs (sign-in attempts, and a marker with the IP address protected by hashing and the browser you sign in from) and notifications sent within the platform. That marker is used only to notify you by email when your account is opened from a new network; it is not used for advertising or to profile you.

Data of interested persons (trial class request): name, email address, WhatsApp number if you decide to leave it, instrument of interest, the message you write to us, and the campaign or link through which you arrived. They are used only to coordinate the trial class and its follow-up; you can request their deletion by writing to contacto@jamboxacademy.com.

3. What we use it for

To provide the service: create and maintain the account, give access to the student space, coordinate classes and sessions, send reminders and notifications.

To manage the subscription: charges and renewals through the gateway, expiration notices, payment confirmations, and receipts.

Operational communications: transactional emails (welcome, account access, sign-in alerts). We do not send commercial advertising without prior and express authorization.

Security: protect accounts, prevent unauthorized access, and log failed sign-in attempts.

4. Minors

If the student is under 18 years of age, the subscription and the processing of their data require the authorization of their father, mother, or guardian, who grants it when contracting the service and creating the minor's account.

Minors' data is processed on a preferential and reinforced basis: it is limited to what is strictly necessary for the classes (name, guardian's contact, materials, and musical progress) and is not used for advertising purposes.

5. With whom we share the data

Wompi, a Colombian payment gateway: processes the transaction data (email, amounts, tokenized payment method) under its own privacy policy.

Technology infrastructure providers (application hosting, database, authentication, file storage, and sending of transactional emails), engaged as data processors: they operate under JamBox's instructions, with contractual security and confidentiality obligations, and they are forbidden to use the data for their own purposes.

Assigned teachers: each teacher accesses only the private space of their assigned students, in order to teach their classes.

Public authorities: only to the extent required by law or by a court order.

No one else: JamBox does not sell, rent, or share personal data with third parties for advertising purposes.

6. Where it is stored and for how long

The data is stored on cloud infrastructure contracted by JamBox. JamBox keeps the data for as long as the relationship exists (active subscription or enabled account) and, afterwards, for the periods necessary to respond to legal, commercial, and tax obligations.

Deletion requests are handled in accordance with the law; certain records (for example, billing) may be kept for legal periods even after the account is deleted.

7. Visit measurement (cookieless analytics)

We use a web analytics tool of our own on the platform (Umami, open source) to understand how many people visit the site and at which step of the process they are lost: visit, opening of the trial class form, start of purchase, and completed payment.

This measurement does not use cookies, does not create user profiles, does not record full IP addresses, and does not make it possible to identify any person. The only thing stored in your browser is a technical marker with the label of the campaign through which you arrived (for example, if you saw a video on social media), in order to attribute the visit correctly. You can delete it at any time by clearing the site data in your browser.

Nothing is measured inside the private areas for students and teachers beyond what is described, and minors' data is not used for advertising purposes.

8. Your rights as a data subject

To know, update, and rectify your data; to request proof of the authorization granted; to be informed of the use made of your data; to revoke the authorization and request the deletion of your data when there is no legal duty to keep it; and to access it free of charge.

Exercise these rights by writing to contacto@jamboxacademy.com, stating your name and the email address with which you use the platform. We respond within the periods of Law 1581 (10 business days to handle a query and 15 days for claims, with the possibility of an extension).

You may also turn to the Superintendence of Industry and Commerce (SIC), Colombia's data protection authority.

9. Security

The platform applies technical and organizational security measures: encryption in transit (HTTPS), role-based access control, blocked leaked passwords, private storage of student files, and availability monitoring. No measure is absolute; if you detect an incident, report it immediately.

10. Changes to this policy

This policy may be updated. Changes are published on this page with their effective date; if the change is relevant, notice is given by email or within the platform.

11. Contact

To exercise rights or make queries or claims about the processing of data, write to us at contacto@jamboxacademy.com.